Privacy policy

This policy explains how Centrolift ("we", "us") uses personal data on the Centrolift platform. We are the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who this covers

• Employees, engineers and managers who use the platform
• Client contacts given access to the client portal
• People named in job records, certificates and site documents

What we collect

• Identity and contact details: name, work and personal email, phone numbers, address
• Employment records: role, qualifications, training, rota, timesheets, leave, expenses, one-to-ones, performance and disciplinary records
• Sickness and medical information (special category data)
• Onboarding documents: ID, driving licence, driving declarations, signed forms (which may include NI number and bank details)
• Work records: job details, photos, signatures, van checks, vehicle mileage and defect reports, lone-worker check-ins
• Client data: company and site contacts, assets, quotes, invoices and certificates
• Technical data: sign-in records, audit history and device sessions

Why we use it and our lawful basis

• Contract — to employ staff and deliver services to clients
• Legal obligation — health and safety, right-to-work, tax, payroll, working-time and vehicle compliance
• Legitimate interests — managing jobs, quality audits, fleet safety and protecting our business
• Special category data (health) — processed under employment and social security obligations (Article 9(2)(b)) with an appropriate policy document in place

Automated reading of documents

Uploaded certificates, receipts and documents may be read automatically to pre-fill fields. Results are always shown for checking and can be edited. No decisions with legal effect are made solely by automated means.

Who we share it with

Trusted service providers who host and run the platform (under data processing agreements), payroll and accountants, insurers, clients (for job certificates and reports) and authorities where the law requires. We do not sell personal data.

International transfers

Where a provider processes data outside the UK we use approved safeguards such as the UK International Data Transfer Agreement.

How long we keep it

Data is kept only as long as necessary — typically employee records for 6 years after employment ends, job and safety records for 6 years or longer where regulations require, and sickness records for the duration of employment plus 6 years.

Your rights

You can ask to access, correct, erase or restrict your data, object to processing, and request data portability. Signed-in users can download their own data from Account security. To make a request, contact Centrolift's office. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Security

Access is invitation-only and role-based, with optional two-step sign-in, encrypted connections and an audit trail of changes.